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AMENDMENTS TO THE CLAIMS: 

1 . (Currently Amended) A method of securing a token from unauthorized use, 
comprising the steps of: 

receiving a first message transmitted from a host processing device and addressed to a 
PIN entry device according to a universal serial bus (USB) protocol , the PIN entry device 
communicating with the host processing device and being different from a keyboard 
associated with the host processing device : 

accepting a PIN entered into the PIN entry device; and 

transmitting a second message comprising at least a portion of the first message and 
the PIN from the PIN entry device to the token along a secure communication path. 

2. (Original) The method of claim 1, wherein: 
the first message is received in the PIN entry device; and 

the second message is transmitted from the PIN entry device directly to the token 
along the secure communication path. 

3. (Previously Presented) The method of claim 1, wherein: 

the step of receiving the first message transmitted from a host processing device and 
addressed to a PIN entry device comprises the steps of: 

receiving the first message in a USB-compliant hub communicatively coupled to the 
host processing device via a first communication path; 

transmitting the first message to the PIN entry device communicatively coupled to the 
USB-compliant hub; and 

the step of transmitting the second message comprising the portion of the first 
message and the PIN and at least a portion of the first message from the PIN entry device to 
the token along a secure communication path comprises the steps of: 

transmitting a second message from the PIN entry device via the USB-compliant hub. 

4. (Original) The method of claim 3, wherein the step of transmitting the 
second message from the PIN entry device via the USB-compliant hub comprises the steps 
of: 
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transmitting a third message comprising the PIN from the PIN entry device to the* 
USB-compliant hub; 

processing the message in the USB-compliant hub to produce the second message; 

and 

transmitting the second message from the USB-compliant hub. 

5. (Original) The method of claim 1, wherein the signal received from the 
host processing device is generated in an API interface. 

6. (Previously Presented) The method of claim 1 , wherein: 
the first message is encrypted according to a first encryption key; and 

the PIN entry device comprises a decryption module having access to the first 
encryption key for decoding the first message. 

7. (Original) The method of claim 1, wherein the second message is 
transmitted to the token according to a USB-compliant protocol. 

8. (Original) The method of claim 1, wherein the second message is 
encrypted according to a second encryption key and the token comprises a decryption module 
having access to the second encryption key. 

9. (Original) The method of claim 1, wherein the step of transmitting the 
second message from the PIN entry device to the token further comprises the step of: 

encrypting the second message according to a second encryption key stored in the 
PIN entry device and the token; and 

transmitting the encrypted second message to the token. 

1 0. (Original) The method of claim 1, wherein the first message is a message 
transmitted from the host processing device to authorize a transaction. 
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1 1 . (Original) The method of claim 1 , wherein the first message is a message 
transmitted from the host processing device to authenticate a user of the token. 

12. (Currently Amended) An apparatus for securing a token from unauthorized 
use, comprising: 

a PIN entry device, communicably communicatively coupleable to a host processing 
device transmitting a first message addressed to the PIN entry device, and communicatively 
coupleable to the token along a secure communication path and according to a universal 
serial bus £USB) protocol, the PIN entry device being different from a keyboard associated 
with the host processing device, the PIN entry device comprising: 

a user input device, for accepting a user-input PIN; and 

a processor, communicatively coupled to the user input device, the processor for 
receiving the first message and combining the first message with the user-input PIN, and for 
producing a second message having at least a portion of the first message and the user-input 
PIN , the second message being transmitted from the PIN entry device to the token along the 
secure communication path . 

13. (Original) The apparatus of claim 12, wherein the first message is 
encrypted according to a first encryption key and the PIN entry device further comprises: 

a module for decrypting the first message from the host processing device according 
to a first encryption key. 

14. (Original) The apparatus of claim 13, wherein the module is a software 
module having instructions stored in a memory accessible to the processor. 

15. (Original) The apparatus of claim 14, wherein the PIN entry device 
further comprises: 

a second module for encrypting the second message according to a second encryption 

key. 
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1 6. (Original) The apparatus of claim 1 5, wherein the second module is a 
software module having instructions stored in a memory accessible to the processor. 

17. (Original) The apparatus of claim 12, wherein the PIN entry device 
further comprises an output device for prompting the user to enter the PIN. 

18. (Currently Amended) A method for securing a token from unauthorized use, 
comprising: 

intercepting by a hub a first message from the host processing device addressed to the 
token in a the hub; 

providing by the hub the intercepted message to a PIN entry device communicatively 
coupled to the hub , the PIN entry device being different from a keyboard associated with the 
host processing device ; 

accepting by the hub a second message from the PIN entry device comprising a user- 
entered PIN; 

generating by the hub a third message from the second message, the third message 
comprising the user-entered PIN and at least a portion of the first message; and 
transmitting the third message from the USB-compliant hub to the token. 

1 9. (Original) The method of claim 1 8, further comprising the step of: 
encrypting the third message according to a first encryption key stored in a memory of the 
token before transmitting the third message to the token. 

20. (Currently Amended) An apparatus for securing a token from unauthorized 
use, comprising: 

a USB-compliant hub, communicably communicatively coupleable between a host 
processing device and the token, the USB-compliant hub havingf : 

means for intercepting a message addressed to the PIN entry device; 

means for generating a third message from the first message and a user-entered PIN; 

and 

means for transmitting the third message to the token; and 
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a PIN entry device, communicatively coupled to USB-compliant hub, for accepting a 
user-entered PIN and providing the user-entered PIN to the USB-compliant hub , the PIN 
entry device being different from a keyboard associated with the host processing device . 

21 . (Original) The apparatus of claim 20, wherein the means for intercepting a 
message addressed to the PIN entry device, the means for generating the third message from 
the first message and a user-entered PIN and the means for transmitting the third message to 
the token comprises at least one processor having at least one communicatively coupled 
memory storing processor instructions for intercepting a message addressed to the PIN entry 
device, for generating the third message from the first message and a user-entered PIN, and 
for transmitting the third message to the token. 

22. (Original) The apparatus of claim 20, wherein the USB-compliant hub 
further comprises a means for encrypting the third message according to an encryption key 
stored in a memory of the token. 

23. (Original) The apparatus of claim 22, wherein the means for intercepting a 
message addressed to the PIN entry device, the means for generating the third message from 

the first message and a user-entered PIN, the means for encrypting the third message 
according to an encryption key stored in the memory of the token and the means for 
transmitting the third message to the token comprises at least one processor having at least 

one communicatively coupled memory storing processor instructions for intercepting a 
message addressed to the PIN entry device, for generating the third message from the first 
message and a user-entered PIN, for encrypting the third message according to an encryption 
key stored in the memory of the token and for transmitting the third message to the token. 
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